CVE-2025-10887: MODEL File Parsing Memory Corruption Vulnerability
Published Dec 15, 2025
·Updated
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected Software
17 affected components
Autodesk Autodesk Products
All of the following
Autodesk Shared Components<2026.5
Any of the following
Autodesk 3ds Max=2026
Autodesk Advance Steel=2026
Autodesk AutoCAD=2026
Autodesk AutoCAD Architecture=2026
Autodesk AutoCAD Electrical=2026
Autodesk AutoCAD Map 3D=2026
Autodesk AutoCAD Mechanical=2026
Autodesk AutoCAD MEP=2026
Autodesk AutoCAD Plant 3D=2026
Autodesk Civil 3D=2026
Autodesk InfraWorks=2026
Autodesk Inventor=2026
Autodesk Revit=2026
Autodesk Revit Lt=2026
Autodesk Vault=2026
Event History
Dec 15, 2025
CVE Published
via MITRE·11:42 PM
Data Sourced
via MITRE·11:42 PM
DescriptionSeverityWeakness
Dec 16, 2025
Data Sourced
via NVD·12:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-10887?
CVE-2025-10887 has a high severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2025-10887?
To mitigate CVE-2025-10887, ensure that your Autodesk products are updated to the latest version provided by Autodesk.
3
What types of Autodesk products are affected by CVE-2025-10887?
CVE-2025-10887 affects various Autodesk products that handle MODEL files.
4
Can CVE-2025-10887 lead to data loss?
Yes, exploitation of CVE-2025-10887 could lead to data loss if arbitrary code execution is leveraged by a malicious actor.
5
Is user interaction required to exploit CVE-2025-10887?
Yes, a user must open a maliciously crafted MODEL file for CVE-2025-10887 to be exploited.